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REMARKS 

This Application has been carefully reviewed in light of the Office Action mailed May 
13, 2005. Claims 1-29 were pending in the Application. In the Office Action, Claims 1-29 
were rejected. In order to expedite prosecution of this Application, Applicants amend Claims 
1-4, 12, 13, 17 and 20-29. Thus, Claims 1-29 remain pending in the Application. Applicants 
respectfully request reconsideration and favorable action in this case. 

In the Office Action, the following actions were taken or matters were raised: 

SFCTTON 102 RF.TFrTTONS 

Claims 1 and 3-29 were rejected under 35 U.S.C. 102(e) as being anticipated by U.S. 
Patent Publication No. 2002/0116639 issued to Chefalas et al. (hereinafter "Chefalas"). 
Applicants respectfully traverse this rejection. 

Of the rejected claims, Claims 1, 12 and 17 are independent. Applicants respectfully 
submit that Chefalas does not disclose or even suggest each and every limitation of 
independent Claims 1, 12 and 17. For example, Chefalas appears to disclose a data 
processing system for detecting a virus and sending a notification of the detected virus to a 
server where the notification includes an identification of the action taken to in response to 
detecting the virus {Chefalas, abstract). However, Chefalas does not appear to disclose or 
even suggest ' Venerating a human-readable and marhine-r ^ Hahle vnlnerahility rWript^n 
language (VDT ,) file " where the VDL file specifies "an identity of an attack," "at least one 
attribute of the specified attack," "at least one policy definition with respect to the specified 
attack" and "at least one attribute of the specified policy definition" as recited by independent 
Claim 1 (emphasis added). Accordingly, for at least this reason, Applicants respectfully 
submit that Therefore, Applicants respectfully submit that Chefalas does not anticipate 
independent Claim 1 . 

Independent Claim 12 recites "generating a human-readable and machine-readable 
vulnerability description language (VDL) file" where the VDL file specifies "a name of an 
attack associated with a vulnerability of the system," "at least one attribute of the specified 
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attack, and the severity of the specified attack associated with a breach of the computer 
system by the specified attack/' "a policy definition with respect to the specified attack," "at 
least one attribute of the specified policy definition" and "a computing platform of the 
system" (emphasis added), and independent Claim 17 recites " a human-readable and 
machine-readable vulnerability description language (VDT ) file containing a definition of at 
least one attack and a definition of at least one policy item for the attack," "an interpreter 
operable to parse the at least one attack and at least one policy item definition in the VDT, file 
and organize the parsed definitions pursuant to a predetermined format" and "a data storage 
operable to store the parsed and organized at least one attack and at least one policy item 
definition, wherein the data storage is accessible by at least one security application" 
(emphasis added). For at least the reasons discussed above in connection with independent 
Claim 1, Applicants respectfully submits that Chefalas does not disclose or even suggest each 
and every limitation of independent Claims 12 and 17. 

Claims 3-11, 13-16 and 18-29 that depend respectively from independent Claims 1, 12 
and 17 are also not anticipated by Chefalas at least because they incorporate the limitations of 
respective Claims 1, 12 and 17 and also add additional elements that further distinguish 
Chefalas. Therefore, Applicant respectfully requests that the rejection of Claims 3-11,13-16 
and 18-29 be withdrawn. 

section ifl3 REJECTIONS 

Claim 2 was rejected under 35 U.S.C. 103(a) as being unpatentable over Chefalas in 
view of U.S. Patent No. 6,279,113 issued to Vaidya (hereinafter "Vaidya"). Applicants 
respectfully traverse this rejection. 

Claim 2 depends from independent Claim 1 . For at least the reasons discussed above, 
independent Claims 1 is in condition for allowance. Therefore, Claim 2 that depends 
therefrom is also in condition for allowance, and Applicants respectfully request that the 
rejection of Claim 2 be withdrawn. 
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Applicants have made an earnest attempt to place this case in condition for immediate 
allowance. For the foregoing reasons and for other reasons clearly apparent, Applicants 
respectfully request reconsideration and full allowance of all pending claims. 

No fee is believed due with this Response. If, however, Applicants have overlooked 
the need for any fee due with this Response, the Commissioner is hereby authorized to charge 
any fees or credit any overpayment associated with this Response to Deposit Account No. 08- 
2025 of Hewlett-Packard Company. 



Date: A ugust 9, 7005 

Correspondence to: 

LJoy Griebenow 

Hewlett-Packard Company 

Intellectual Property Administration 

P. O. Box 272400 

Fort Collins, CO 80527-2400 

Tel. 970-898-3884 



Respectfully submitted, 




Reg. No. 43,486 
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